Connecting my PPTP/L2TP client from my inside my firewall.

Connecting my PPTP/L2TP client from my inside my firewall.

Post by Teddy Wan » Tue, 23 Jan 2001 03:39:11



Hey folks,

I've got a little problem that's I haven't been able to resolve yet.
I run a small network at home which uses a Linux 2.2.x machine as it's
firewall/nat server.  I'm only using the standard ipchains commands
right now.  Here are the only commands that I've got setup right now.

/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.168.0.0/24 -j MASQ

I'd like to facilitate the connection of a PPTP client on my network
back out to my works PPTP server for a VPN link, so that the
connection would look something like this:

PPTP Client --> Linux IP Masq Firewall --> Internet --> Cisco VPN 3005
PPTP Server --> Private Network

Where the PPTP Client is on my home network.

So far I've tried some ipchains commands, but they don't seem to have
worked.

Please help.

Teddy

 
 
 

Connecting my PPTP/L2TP client from my inside my firewall.

Post by The Fawkmeist » Wed, 24 Jan 2001 13:38:01




Quote:>Hey folks,

>I've got a little problem that's I haven't been able to resolve yet.
>I run a small network at home which uses a Linux 2.2.x machine as it's
>firewall/nat server.  I'm only using the standard ipchains commands
>right now.  Here are the only commands that I've got setup right now.

>/sbin/ipchains -P forward DENY
>/sbin/ipchains -A forward -s 192.168.0.0/24 -j MASQ

>I'd like to facilitate the connection of a PPTP client on my network
>back out to my works PPTP server for a VPN link, so that the
>connection would look something like this:

>PPTP Client --> Linux IP Masq Firewall --> Internet --> Cisco VPN 3005
>PPTP Server --> Private Network

>Where the PPTP Client is on my home network.

>So far I've tried some ipchains commands, but they don't seem to have
>worked.

>Please help.

>Teddy

I'm struggling with the same problem using a RedHat 6.2 firewall.  I
think the solution might be to modprobe the ip_masq_pptp.o module, but
6.2 (2.2.14-5.0) doesn't seem to include this as a module under
lib/modules/.../ipv4.  I'm in the process of educating myself how to
upgrade my kernel to a version that has this.

But, I guess I'm still not sure if I'm on the right track.  Any Linux
veterans have some advice here?